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UL REMARKS 

Claims 1-14 are pending in this application. By this amendment, claims 1, 7, 9, H and 
14 have been amended. Applicant does not acquiesce in the correctness of the rejections and 
reserves the right to present specific arguments regarding any rejected claims not specifically 
addressed. Further, Applicant reserves the right to pursue the full scope of the subject matter of 
the original claims in a subsequent patent application that claims priority to the instant 
application. Reconsideration in view of the following remarks is respectfully requested. 

In the Office Action, claim 14 is rejected under 35 U.S.C. §1 12 as allegedly being 
indefinite. Claims 1-14 are rejected under 35 U.S.C. §103(a) as allegedly being unpatentable 
over Montulli (U.S. Patent No. 6,1 34,592), hereafter "Montulli" in view of "Assessing the 
Security of Your Web Applications" by Gaur, hereafter "Gaur" in view of "Secure Cookies on 
the Web" by Park et al, hereafter "Park" and in view of A pplied Cryptograph y- Second Edition, 
by Schneier, hereafter "Schneier." Claims 1, 2, 4, 5, 7 and 1 1 are rejected under the judicially 
created doctrine of obviousness type double patenting as allegedly being unpatentable over claim 
2 of White et ai (U.S. Patent No. 6,065,1 17) hereafter "White" in view of Park and Schneier. 

A, REJECTION OF CLAIM 14 UNDER 35 U.S.C. §112 

The Office has asserted that claim 14 is indefinite for failing to particularly point out and 
distinctly claim the subject matter which applicant regards as the invention. Applicant has 
amended claim 14 to recite .storing said state object on the client" Applicant asserts that this 
amendment further clarifies the invention. Accordingly, Applicant requests that the rejection be 
withdrawn, 
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B. REJECTION OF CLAIMS M4 UNDER 35 U-S.C. §1 03(a) 

With regard to the Office's 35 U.S,C §103(a) rejection, Applicant asserts that there is no 
motivation or suggestion to combine the cited references. Specifically, with respect to 
independent claims I, 7, 11 and 14, Park's failure to teach or suggest a single encrypted state 
object eliminates the motivation to use the Park reference to combine the cookies of Montulli 
with the applied cryptography of Schneier. Montulli teaches transferring state information 
(cookies) between a server computer system and a client computer system. Abstract. However, 
nowhere does Montulli teach or suggest that the cookies are public / private key encrypted. 
Schneier teaches public / private key encryption but does not teach or suggest cookies. The 
Office attempts to bridge the gap between these two references by using the public-key-based 
solution of Park. However, the public-key-based solution of Park is based on a secure cookie set 
having a number of cookies bundled together. Page 39, Providing Integrity, paragraph 2; FIG. 3. 
Park never teaches encrypting a single cookie. The present invention, in contrast, includes 
" *\ . .creating a single state object containing post-action state information," and **. . .encrypting 
said state object using said private key." Claim 1 . As such, the encryption, as included in the 
present invention, is performed on a single state object not a secure cookie set as in Park. Thus, 
even assuming arguendo, Montulli teaches the single state object as argued by the Office and 
Schneier teaches the private key as argued by the Office, there is no motivation or suggestion to 
use Park to combine Montulli with Schneier because Park does not teach or suggest a single 
encrypted state object, and there is therefore no need to use public / private key encryption with 
cookies. Accordingly, Applicant respectfully requests that the Office withdraw its rejection. 
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With regard to the Office's other arguments regarding dependent claims, Applicant herein 
incorporates the arguments presented above with respect to independent claims listed above. In 
addition, Applicant submits that all dependant claims are allowable based on their own distinct 
features. However, for brevity, Applicant will forego addressing each of these rejections 
individually, but reserves the right to do so should it become necessary. Accordingly, Applicant 
respectfully requests that the Office withdraw its rejection. 

C. REJECTION OF CLAIMS 1, 2, 4, 5-7 and 1 1 UNDER OBVIOUSNESS TYPE 
DOUBLE PATENTING 

Claims 1, 2, 4, 5-7 and 1 1 are rejected under the judicially created doctrine of 

obviousness-type double patenting over claim 2 of U.S. Patent No. 6,065,1 17. Initially, 

Applican t asserts, as argued above, that the absence in Park of a single enorypted state object 

eliminates the motivation or suggestion to use Park to combine White with Scbneier. 

Furthermore, Applicant will, if necessary, address this in a later paper with, e.g., a terminal 

disclaimer, upon an indication of allowable subject matter. 
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IV. CONCLUSION 

In light of the above, Applicant respectfully submits that all claims are in condition for 
allowance. Should the Examiner require anything further to place the application in better 
condition for allowance, the Examiner is invited to contact Applicant's undersigned 
representative at the number listed below. 



Hoffman, Wamick & D'Alessandro LLC 
Three E-Comm Square 
Albany, New York 12207 
(518) 449-0044 
(518) 449-0047 (fax) 



Respectfully submitted, 



Date: September 28> 2004 




Donald A. D'Alessandro 
Reg. No.: 42,456 
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